Configuration file for SCCM TraceFiles - Text Log Adapter - by Mikesch72

Status : 

 


1
0
Sign in
to vote
ID 813445 Comments
Status Active Workarounds
Type Suggestion Repros 0
Opened 1/10/2014 1:26:27 AM
Access Restriction Public

Description

I try to parse Logfiles from SCCM 2007 (for example from ccmexec.log in C:\Windows\CCM\Logs), but I have no idea how to merge the TIME- and DATE-Attribute into a TIMESTAMP-Attribute :-(. Here my config so far:

message SMSTrace with 
    EntryInfo { Regex = @"<!\[LOG\[(?<Sentence>.*)\]LOG\]!><time=""(?<Time>.*)"" date=""(?<Date>.*)"" component=""(?<Component>.*)"" context=""(?<Context>.*)"" type=""(?<TraceType>\d+)"" thread=""(?<ThreadId>\d+)"" file=""(?<FileName>.*)"">" } : LogEntry
{
	string Sentence;
	string Time;
	string Date;
	string Component;
	string Context;
	ushort TraceType;
	uint ThreadId;
	string FileName;
}
Sign in to post a comment.
Posted by Paul E Long on 5/19/2014 at 1:16 PM
Sorry for the delay. It seems our backend system didn't pick this up properly. I commented on a solution that you could use in the forums. Can you tell me if this thread gives you the info you need?

http://social.technet.microsoft.com/Forums/en-US/751c9ce6-6f24-4295-91df-3460371a36b6/how-to-parse-wpp-format-timestamps-?forum=messageanalyzer

Thanks,

Paul